High · 7.5 CVE-2026-32468 EUVD-2026-60904GHSA-v24g-xgjf-4473

WordPress Duitku Payment Gateway plugin <= 2.11.14 - Sensitive Data Exposure vulnerability

Published Aug 18, 2026 · Updated Aug 18, 2026 · Assigned by Patchstack

Vendor: rayhanduitku Product: Duitku Payment Gateway

Description

Unauthenticated Sensitive Data Exposure in Duitku Payment Gateway <= 2.11.14 versions.

Affected products

Vendor	Product	Affected	Fixed
rayhanduitku	Duitku Payment Gateway	≤ 2.11.14	—

References

https://patchstack.com/database/wordpress/plugin/duitku-social-payment-gateway/vulnerability/wordpress-duitku-payment-gateway-plugin-2-11-14-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry